Tiki Tiki Wiki CMS/Groupware 18.0 Alpha1

CPE Details

Tiki Tiki Wiki CMS/Groupware 18.0 Alpha1
tiki
tikiwiki_cms\/groupware
18.0
2019-10-23
18h34 +00:00
2019-10-23
18h34 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:tiki:tikiwiki_cms\/groupware:18.0:alpha1:*:*:*:*:*:*

Informations

Vendor

tiki

Product

tikiwiki_cms\/groupware

Version

18.0

Update

alpha1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-8966 2020-04-01 20h18 +00:00 There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments (scripts) into a legitimate web page.
6.5
Moyen
CVE-2018-14849 2018-08-13 15h00 +00:00 Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php.
5.4
Moyen
CVE-2018-14850 2018-08-13 15h00 +00:00 Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
5.4
Moyen
CVE-2018-7290 2018-03-09 19h00 +00:00 Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1.
5.4
Moyen